Regulations

The obligation library

Every regulation below is decomposed into individual, testable obligations, sourced directly from the official EUR-Lex text — never from a competitor's summary or secondary commentary. Click through to see each regulation's real obligations.

Regulation

Regulation (EU) 2024/1689 — artificial intelligence

CELEX: 32024R1689
Obligations tracked: 8

View official text on EUR-Lex →

Regulation

Regulation (EU) 2024/2847 — Cyber Resilience Act

CELEX: 32024R2847
Obligations tracked: 2

View official text on EUR-Lex →

Regulation

Regulation (EU) 2022/2554 — digital operational resilience

CELEX: 32022R2554
Obligations tracked: 11

View official text on EUR-Lex →

Delegated Regulation

Commission Delegated Regulation (EU) 2025/301 — DORA incident reporting RTS

CELEX: 32025R0301
Obligations tracked: 0

View official text on EUR-Lex →

Regulation

Regulation (EU) 2016/679 — data protection

CELEX: 32016R0679
Obligations tracked: 5

View official text on EUR-Lex →

Directive

Directive (EU) 2022/2555 — cybersecurity

Directive — takes legal effect through national transposition, which may be stricter than the base EU text.

CELEX: 32022L2555
Obligations tracked: 8

View official text on EUR-Lex →

Implementing Regulation

Commission Implementing Regulation (EU) 2024/2690 — NIS2 Art 21(2) technical requirements

CELEX: 32024R2690
Obligations tracked: 48

View official text on EUR-Lex →